WhiteNightShadow/hello_js_reverse_skill

🔧 AI-powered JS逆向工程 Skill —— 覆盖加密还原、混淆分析、动态Cookie、WASM逆向、协议对抗等全链路场景，通过 Node.js 实现算法还原与模拟请求。适配 Claude Code / Claude.ai / 其他AI编码工具

What it solves

This project provides a comprehensive framework and set of tools for Web reverse engineering, specifically targeting the restoration of API signatures and the bypassing of anti-bot protections. It addresses the difficulty of analyzing obfuscated JavaScript, bypassing browser fingerprinting (like Cloudflare or Akamai), and recreating encryption algorithms in Node.js or Python for automated requests.

How it works

The system operates as a "Skill" for AI agents (like Cursor or Claude Code), integrating with the camoufox-reverse MCP server to provide a unified workflow. It combines a C++ engine-level anti-detection browser (Camoufox) for network capture, source code location, and Hook debugging with a library of analysis strategies and templates. The process typically involves:

  1. Analysis: Using MCP tools to search code, inject hooks, and trace function calls.
  2. Decision: Determining the anti-bot type (signature-based, behavior-based, or pure obfuscation).
  3. Implementation: Using provided templates to implement the logic in Node.js (via crypto or vm sandboxes) or Python (via pycryptodome or curl_cffi).

Who it’s for

  • Security researchers and developers performing Web reverse engineering.
  • Data engineers building scrapers that need to bypass sophisticated anti-bot systems.
  • Developers needing to replicate complex JS-based encryption or signature logic in server-side languages.

Highlights

  • Dual-Language Support: Ready-to-use templates for both Node.js and Python implementation.
  • Advanced De-obfuscation: Strategies for handling OB obfuscation, control flow flattening, and JSVMP (JavaScript Virtual Machine Protection) via source-level instrumentation.
  • Anti-Detection Integration: Leverages Camoufox for engine-level fingerprint masking to bypass high-level protections.
  • Cookie Attribution: A specialized tool to distinguish between cookies set via HTTP headers and those set via JavaScript.
  • WASM Support: Tools and guides for reversing WebAssembly encryption modules.

Related

  • Project
    WhiteNightShadow/camoufox-reverse-mcp

    An MCP server that enables AI assistants to perform JavaScript reverse engineering using the Camoufox anti-fingerprinting browser to bypass advanced bot detection and JSVMP protections.

  • Project
    redf0x1/camofox-browser

    An anti-detection browser server for AI agents that uses C++ engine-level fingerprint spoofing to bypass bot detection via a REST API and CLI.

  • Project
    Bin-Huang/camoufox-cli

    A command-line interface for an anti-detect browser that allows AI agents to bypass bot detection using C++-level fingerprint spoofing and persistent identities.

  • Project
    jo-inc/camofox-browser

    camofox-browser is a Node.js server that runs a patched Firefox (Camoufox) with built‑in anti‑bot fingerprint spoofing and exposes a REST API for AI agents. It returns compact accessibility snapshots, stable element references, cookie import, proxy/GeoIP handling, VNC login, and optional Playwright tracing, all deployable via Docker, Fly.io, Railway, or locally.

  • Project
    zhizhuodemao/js-reverse-mcp

    An AI-native MCP server that enables AI assistants to perform JavaScript reverse engineering by providing specialized tools for debugging, script analysis, and anti-detection.